Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.mft
File: GreiV-JheJd0mVL-Vt8ZQMmjhlk.mft (raw, json)
Hash identifier: BeB8HYgr7CVcVSPiJUg+EnWFMz/TxLBSRcW2ls15LIg=
Subject key identifier: 0D:8A:BD:88:D1:6A:D7:54:AE:32:FF:CD:85:BA:3D:E3:85:A6:23:07
Authority key identifier: 1A:B7:A2:57:E2:61:78:97:74:99:52:FE:56:DF:19:40:C9:A3:86:59
Certificate issuer: /CN=1ab7a257e2617897749952fe56df1940c9a38659
Certificate serial: 01967D5832B2B81BB1856DA45E443069E847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GreiV-JheJd0mVL-Vt8ZQMmjhlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.mft
Manifest number: 10D0
Signing time: Mon 28 Apr 2025 17:00:54 +0000
Manifest this update: Mon 28 Apr 2025 17:00:54 +0000
Manifest next update: Tue 29 Apr 2025 17:00:54 +0000
Files and hashes: 1: GreiV-JheJd0mVL-Vt8ZQMmjhlk.crl (hash: l45AowuXdiyVJVHHjONnSldvw6pdMJ2eUYUFG60loxc=)
2: PfFy3e8LNIXwxdL8OuYhM9z12Ws.roa (hash: 8+uM2+g15li/FppVigQneM82V/zGTOIgt52B/js9MAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GreiV-JheJd0mVL-Vt8ZQMmjhlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:58:32:b2:b8:1b:b1:85:6d:a4:5e:44:30:69:e8:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab7a257e2617897749952fe56df1940c9a38659
Validity
Not Before: Apr 28 17:00:54 2025 GMT
Not After : Apr 29 17:00:54 2025 GMT
Subject: CN=0d8abd88d16ad754ae32ffcd85ba3de385a62307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ee:c1:0e:a8:25:13:f6:b9:bd:4e:ee:b6:98:
1a:bf:93:18:b2:43:2d:49:48:ce:41:a8:2b:cd:f1:
b9:b6:7a:84:ef:1e:ac:b5:b9:f3:20:ab:5e:a6:62:
3d:87:f9:85:20:4e:ce:cb:2e:d6:e2:9f:40:4a:22:
f1:73:0f:fa:a0:e4:30:cd:2f:16:dc:1e:da:b2:ea:
49:70:de:af:b7:94:cb:76:3c:87:c2:cc:ab:02:6e:
5b:3f:1c:b1:ac:6f:d5:f9:8f:95:f7:bd:37:85:2c:
d9:54:92:c2:aa:b6:a9:5c:e1:87:40:c3:2b:60:09:
d4:e0:e9:e2:5b:ec:c7:21:54:b5:43:ed:d7:6d:78:
38:f5:ed:c4:cd:bd:fd:69:c0:04:66:fb:67:39:fa:
e8:a5:4a:c9:e0:56:8f:37:d0:f1:36:00:78:89:54:
64:b4:6b:25:03:1f:20:bf:4e:9c:dd:be:20:dc:22:
03:f9:f7:75:cb:bf:ed:8e:05:ce:70:dd:95:ea:d0:
56:27:0b:87:f7:9f:ca:17:e4:dc:8a:96:c0:15:af:
50:6b:e6:5c:04:db:96:46:cc:36:cd:97:ef:58:c1:
d2:81:f7:13:b7:08:ac:30:f0:e7:e5:c6:79:e5:9e:
a5:8b:5e:95:55:11:d2:06:06:14:b9:35:f0:57:bb:
3c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8A:BD:88:D1:6A:D7:54:AE:32:FF:CD:85:BA:3D:E3:85:A6:23:07
X509v3 Authority Key Identifier:
keyid:1A:B7:A2:57:E2:61:78:97:74:99:52:FE:56:DF:19:40:C9:A3:86:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GreiV-JheJd0mVL-Vt8ZQMmjhlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ec:51:ec:2e:a8:c9:12:f9:fa:cf:19:0e:77:2f:4f:1e:ad:
c7:57:d6:fb:58:23:38:81:ab:a0:e8:3c:11:12:5e:58:57:ed:
fb:c4:e4:11:5f:e1:87:2b:bd:81:77:d0:da:c4:de:87:62:1e:
57:5e:b3:ca:75:24:0e:9a:9b:b9:7a:ea:92:3e:ba:51:ad:a5:
fc:a3:70:85:97:c7:4d:4e:c0:a8:86:78:86:71:f7:63:08:2a:
fb:f3:27:ea:e9:f4:1b:6a:92:38:67:0a:06:9c:dc:51:6a:c7:
1f:f0:5e:48:50:2b:89:31:7e:bc:cb:5b:0d:4a:5f:25:31:81:
5f:c5:80:42:11:16:a8:1a:4e:97:b7:d8:5d:79:d3:51:07:9c:
b7:c7:6a:7e:86:ad:be:04:a8:b0:f3:16:de:c7:5e:c1:04:0a:
4a:bc:83:44:4a:bc:b9:a0:02:51:90:13:0f:aa:01:17:e1:3e:
57:e8:24:24:c9:ed:27:2e:5e:e1:0a:c3:9e:bb:cc:d5:60:ea:
a4:4a:c9:b9:43:31:6c:d2:99:43:0a:12:50:78:11:f4:1f:76:
ae:15:12:90:9a:ee:0f:72:3e:31:9b:45:a5:8e:c6:27:88:44:
dc:e0:ff:25:8d:2c:84:83:99:63:e0:ed:73:c7:7c:22:17:fa:
8f:1c:48:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:01:04 2025 by rpki-client